The operating system used on the majority of Cisco's routers and switches; a package of routing, switching, internetworking and telecommunications functions tightly integrated with a multitasking operating system. For Apple's mobile device OS, use apple-ios.

learn more… | top users | synonyms

7
votes
2answers
1k views

Can the iPad remember the iTunes password when using Meraki MDM?

I'm currently using Cisco Meraki MDM to manage apps that get pushed out to company-owned iPads. In order for the company to retain ownership of the apps we purchase, apps are installed through the ...
1
vote
0answers
971 views

Cannot access L2L VPN from RA VPN connected client on Cisco ASA 5510

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 7.2 at our headquarters. The ASA also provides IPSec Remote Access ...
2
votes
1answer
117 views

cisco ios - syslog version

I am writing small article on Syslog and I was wondering, if there is any resource that tells me what version of Syslog is supported in what ios version? By Syslog version I mean rfc 3164/rfc ...
0
votes
0answers
573 views

Strongswan ipsec <--> iPhone, can't access LAN

I'm trying to connect to my LAN with iPhone, using Cisco IPsec VPN connection. I can connect to VPN, but I can't access any LAN devices. Hardware/Software: Strongswan 5.0.4, running on router - ...
5
votes
1answer
2k views

How do you NAT Hairpin in IOS 8.3+

As I asked here and duplicated here it appears NAT Hairpinning is the answer I'm looking for to allow internal servers to loopback through the ASA to access external IP's (without using DNS ...
1
vote
1answer
605 views

How to make a Cisco AP1142N speak Bonjour?

I have an autonomous Cisco access point (model AP1142N) and an Apple TV that are on the same physical and logical network. Bonjour does not work across the access point — both WiFi-to-WiFi and ...
2
votes
2answers
355 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
1
vote
0answers
161 views

How do get multicast to work on a Cisco AP1240?

I have a Cisco AP1142N in standalone mode acting as a simple AP. On the wired segment of the LAN, there is an Apple TV that is used to mirror laptop screens to a large TV screen. As long as clients ...
-1
votes
1answer
113 views

iPad<->Device Ad-Hoc network failures using Auto IP addresses [closed]

We are using the iPad to make an ad-hoc wireless connection to our proprietary device. DHCP is not available, so we are using addresses in the Auto-IP range. The user selects the device from the list ...
5
votes
1answer
455 views

Tag/Untag VLANs from Port Perspective on HP Switch

I'm familiar with vlans and tagging, and we usually use the command line interface for our HP Layer 3 switches. I've done quite a few: vlan 10 untagged 21 I've always wondered if this was possible ...
0
votes
2answers
278 views

Is there an issue with Exchange 2010 Active Sync and iOS 6.1.x?

We are doing a complete server and infrastructure update with a Migration from Exchange 2007 to 2010. Along with the server upgrade we're doing a migration from an old antiquated 192.0.2.x internal ...
0
votes
1answer
139 views

Route maps on dual homed Cisco router

I have a Cisco 1801 on a remote site with dual WAN connections, with route maps to correctly NAT depending on which interface the traffic leaves via. I use IP SLA to adjust the default route from the ...
-1
votes
1answer
216 views

Can 'show mac address-table' be used inside user mode? [closed]

I've been studying for my CCNA exams using Cisco ICND1 Official Cert Guide, Wendell Odom. On one question they ask in which modes show mac address-table can be executed. The answer is User mode and ...
-1
votes
1answer
376 views

Plesk cron iOS notifications randomly stopped working [closed]

Recently, I started getting these cron error from Plesk. This cron controls push notifications to Plesk Manager on my iPhone/iPad. Obviously, turning off the cron stops the error but I want the cron ...
1
vote
2answers
806 views

Having two IP Routes/Gateways of last Resort on an HP Switch

We have an HP Layer 3 Switch that is doing IP routing between vlans. The general set up is that the switch has an IP address on each VLAN and IP routing is enabled. On our servers VLAN, we have a ...
0
votes
1answer
242 views

Is it possible to configure a Cisco router to serve as a Teredo relay?

The router in question is a Cisco 871, show version as follows: Cisco IOS Software, C870 Software (C870-ADVIPSERVICESK9-M), Version 12.4(24)T8, RELEASE SOFTWARE (fc1) Technical Support: ...
0
votes
3answers
1k views

Cisco 881 throughput/bandwidth issue

We have a dedicated 30Mb connection (up/down) from our ISP, but we can only seem to get 10Mb (up/down) from the router. Does anyone know what we're missing, or how we can tweak the settings on this ...
0
votes
1answer
745 views

Cisco IOS Router and Azure VPN - tunnel established, but traffic is not flowing

I am trying to connect a Cisco IOS router to Azure via the IPSec VPN. I have used the Cisco ISR template to establish a tunnel from my router to Azure. In the Azure control panel, I can see that the ...
1
vote
2answers
166 views

Cisco IOS Setting up a password/secret

I'm figuring out the basics to CISCO Ios commands and I am struggling to find out the answer to the following question: What would provide a better protection when you set up a password to allow ...
1
vote
1answer
181 views

iPhone loads Wi-Fi captive portal page over 3G (iOS 6)

I've made a captive portal using iptables NAT redirection and white-listed MACs. This works nicely, and iDevices pop up my login/terms page after association. However, I've noticed that when 3G is ...
0
votes
1answer
21 views

Temporarily reduce Cisco trust level

I'm a new network admin and I'm looking through the various config files we have in our routers/switches/asa. I'm wondering if there is a way to lower trust level that my login has from 15 to ...
0
votes
2answers
61 views

Cisco Archiving of Logs - Rebooting device resets file count but doesn't remove files

We are using the cisco IOS feature of configuration archiving and it has been very useful. One thing we are finding is that we have set the maximum file count to 14, which is fine. Except when we ...
0
votes
1answer
482 views

Cisco ASA 5520 is missing management interface

The ASA 5520 show version shows the following Cisco Adaptive Security Appliance Software Version 8.4(2) System image file is "Unknown, monitor mode tftp booted image" Config file at boot was ...
-1
votes
1answer
189 views

Is it possible to log Active Directory users internet activity on a Cisco Firewall-IOS router?

We are looking at replacing our Forefront TMG server with a combination Cisco ISE VMware instance and hopefully an Active Directory integration with our edge router. We need to log all authenticated ...
0
votes
3answers
551 views

c1841 unable to recognize HWIC-1T (smart serial) card. any idea?

I have this problem where c1841 router unable to verify HWIC-1T card (with smart serial connector), you have to know that i have other routers with IOS c1841-ipbasek9-mz.151-4.M5 and ...
0
votes
1answer
767 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
3answers
251 views

IOS Nated port forwarding

I have cisco ios router with ios C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M1. And I have setup Nat with port overload (one public IP). And there is a static mapping: ip nat source static ...
3
votes
1answer
860 views

Dual Cisco Router Stateful Firewall

At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs. Now we want to purchase a redundant router of the same model to eliminate a single point of failure. I can set up BGP ...
0
votes
1answer
109 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
0
votes
1answer
249 views

Cisco ACL Block by Packet Length

I am presently blocking a small scale DDOS attack using IP addresses but all the packets are the same size, 1514 bits and I kind of don't want to fill up an ACL rule with a bunch of IPs. After reading ...
0
votes
1answer
1k views

Cisco - Port's configured trust state is now operational

I am looking at a Cisco switch's log at work and am a bit confused by how verbose it can be at times. For instance, we use automatic QoS here and I often see this when phones are plugged: Mar 18 ...
0
votes
1answer
430 views

What are Serial network interfaces?

I am reading through documentation which talks about "Serial network interface" something which also shows up when IOS boots. I never see "Serial network interface" defined anywhere. If my router ...
1
vote
0answers
181 views

Tool to parse Dell PowerConnect switch configs to make them more readable and diff friendly

I've been working with many Dell PowerConnect switch configurations over the years, and even though their configuration console is quite IOS like, it doesn't manage configuration statements the same ...
0
votes
1answer
3k views

Can you ping a Cisco Router's Loopback Interface from a PC using PacketTracer

I may be misunderstanding what you can do with a Router's loopback interface. I am trying to ping it from a PC on the same network. I am using Packet Tracer to simulate this, a Cisco 1841 and a PC ...
8
votes
4answers
192 views

Prevent end-users from purchasing apps on iOS

We are looking to deploy iPads from inside our organization. We want to be able to install apps for users, which can be done via Mobile Device Management. However, we do not want users to be able to ...
0
votes
2answers
1k views

strongSwan without password on iOS [closed]

I have the following problem: I need to authenticate on VPN with iOS without password, but with certificate only. The reason is I need "VPN on demand", which is active on certificate authentication ...
0
votes
1answer
182 views

EasyVPN vs Site to Site VPN bandwidth use

We have recently switched from site-to-site VPNs to EasyVPNs. At around the same time, we noticed increased bandwidth use. Does anyone know whether these two VPN methods use noticeably different ...
0
votes
1answer
59 views

dot3StatsDuplexStatus not firing from Cisco Switch

Anyone have any luck with this Trap dot3StatsDuplexStatus OID = 1.3.6.1.2.1.10.7.2.1.19 I am able to test the OID by doing an SNMP walk which shows the correct information, however no Traps are ever ...
1
vote
1answer
182 views

Cisco IOS: How is it possible to break with default config register of 0x2102

The default config register of an IOS device is 0x2102. The table here clearly states that 0x0100 signifies "Ignore Break," and that the default config register employs these options: Ignores break ...
0
votes
1answer
1k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
0
votes
1answer
594 views

Cisco AP, how to show dot11 wpa handshake timeout?

Please help me with a newbie question regarding Cisco AP CLI . According to this Cisco doc , I know how to change WPA handshake timeout value to 2000 milliseconds. Cisco1242AG-1(config)#dot11 wpa ...
3
votes
2answers
1k views

What is the Cisco iOS (CLI) command to display a WAP's Radio MAC address?

I can't believe I'm unable to find this with teh g00glez or by RTFMing, but does anyone know how to display the MAC address of a Cisco WAP's Radio (wifi connection) from the command line? show ...
2
votes
2answers
1k views

Cisco IOS router config — how to disable SSH / SNMP on all but loopback address?

Sorry for the naive question; a quick reading of the cisco docs doesn't answer this question... So I've got a router (say for the sake of argument a 4500 running IOS 15.x) It has interfaces in 3 ...
2
votes
2answers
1k views

How to determine most stable Cisco IOS release?

This post is about a Catalyst 4948E switch. I was looking on the download page and realized that there are no "GD" versions available. Are the "ED" versions stable? Even if you change "ED" to "GD" ...
2
votes
1answer
463 views

Can a Private VLAN trunk also trunk normal VLANS

Imagine a topology with Switch A and Switch B trunked together. Also imagine a router on a stick attached to Switch A that routes for these VLANs. The VLANs are as follows: VLAN 1 = 10.1.1.0/24 ...
-1
votes
1answer
86 views

Using PVLANs with normal VLANs in a trunked environment

Assume a trunked environment with two switches, S1 and S2. The swtiches are connected with a trunk port designed to pass VLAN 26. What would happen if VLAN 26 on S2 is configured as a private-vlan ...
3
votes
0answers
114 views

IOS QOS service policy pass-through on a tunnel interface

I have some SIP phones on one network that go through an IPIP tunnel to get to the server. I've setup QOS rules to watch for appropriate VOIP traffic as follows: class-map match-any class-voice ...
1
vote
1answer
71 views

Does IOS 12.4 Basic have the “ip nat pool …” available

Could someone with Cisco IOS 12.4 Basic check to see if the command "ip nat pool" is available? We have 12.2 basic and I know it is in the 12.4 advanced version but our budget is very limited so I am ...
4
votes
1answer
545 views

Why did my Cisco router hang?

We have a Cisco 1841 in our storage IDF that was originally running a 12.4(1) IP-BASE image; I wanted to upgrade to an advancedservicesk9-mz image, but the flash did not have enough space, so I ...
0
votes
2answers
707 views

Cisco: show run vlan # vs show run int vlan #

What is the difference between the two commands? Show run vlan # = blank output show run int vlan # = vlan configuration Likewise: show vlans No virutal LANs configured show vlan ...